[dns-operations] Natting DNS farm behind LB - using priv ip space.
fweimer at bfk.de
Fri Jun 17 11:34:25 UTC 2011
* Roland Dobbins:
> NATting DNS servers (or any other type of server) is a Very Bad Idea -
> the NAT is a stateful DDoS chokepoint.
I'm pretty sure address translation is part of many traffic scrubbing
devices and services, so you're grossly oversimplifying. 8-)
Florian Weimer <fweimer at bfk.de>
BFK edv-consulting GmbH http://www.bfk.de/
Kriegsstraße 100 tel: +49-721-96201-1
D-76133 Karlsruhe fax: +49-721-96201-99
More information about the dns-operations